Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/3139302e322e31372e302f32342d3234203d3e203233343536.roa
File:                     3139302e322e31372e302f32342d3234203d3e203233343536.roa (raw, json)
Hash identifier:          wPXD4flE+a2eKG2ghe480OQkqyEdbESOsZxlpYKd/nM=
Subject key identifier:   89:08:02:3D:20:97:DE:8C:FF:29:7F:79:DA:D9:3E:54:80:69:68:F9
Certificate issuer:       /CN=171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7
Certificate serial:       3B75FABE833D8E2D83B90E2835A2D9C5E0B0EC33
Authority key identifier: 17:1F:14:D5:AE:EC:89:F4:AE:41:04:C0:F6:09:DE:27:7D:1D:3C:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/3139302e322e31372e302f32342d3234203d3e203233343536.roa
Signing time:             Tue 05 Mar 2024 18:12:05 +0000
ROA not before:           Tue 05 Mar 2024 18:07:05 +0000
ROA not after:            Tue 04 Mar 2025 18:12:05 +0000
asID:                     23456
IP address blocks:        190.2.17.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:75:fa:be:83:3d:8e:2d:83:b9:0e:28:35:a2:d9:c5:e0:b0:ec:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7
        Validity
            Not Before: Mar  5 18:07:05 2024 GMT
            Not After : Mar  4 18:12:05 2025 GMT
        Subject: CN=8908023D2097DE8CFF297F79DAD93E54806968F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:99:02:12:55:e5:43:e9:3d:cd:b7:9f:3f:31:
                    2c:6a:e5:e3:28:ba:1e:45:6f:28:39:6d:77:00:a6:
                    38:7f:97:98:42:a6:8f:93:28:a3:fe:bd:0a:92:47:
                    67:7d:71:a1:ac:29:2b:cb:5c:7e:4c:a7:dc:97:01:
                    ba:2b:48:93:70:d3:6a:e7:0a:04:15:67:a3:1d:3c:
                    a5:6b:8b:50:5e:aa:9b:f5:e6:f8:92:e4:ae:1f:8c:
                    07:82:71:27:25:bc:67:05:96:3c:c3:c9:2d:f3:dd:
                    31:db:6b:ed:33:f1:ca:fa:1c:e0:21:72:46:63:19:
                    d7:80:ae:16:5b:ec:c2:64:ae:b6:81:80:41:97:ca:
                    15:7f:a8:3a:d6:5d:db:52:43:5f:9d:f3:a7:05:b4:
                    61:95:59:d7:04:7f:c4:63:1c:f9:ed:3c:8a:65:8b:
                    77:d8:7f:97:6b:1a:05:b6:07:b0:64:4a:32:e7:21:
                    84:dc:1d:e8:b5:a6:d5:eb:02:8f:47:41:98:b3:52:
                    78:38:85:a5:83:36:9e:b4:42:2e:b1:a9:69:f1:fe:
                    4d:a1:f6:b8:f4:2b:f3:90:ad:09:58:6f:2d:51:7b:
                    23:04:15:6c:f8:92:7d:a6:90:71:f7:b6:32:a6:2a:
                    d8:1d:e3:05:fc:60:f3:4c:b0:50:49:70:d1:21:54:
                    10:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:08:02:3D:20:97:DE:8C:FF:29:7F:79:DA:D9:3E:54:80:69:68:F9
            X509v3 Authority Key Identifier:
                keyid:17:1F:14:D5:AE:EC:89:F4:AE:41:04:C0:F6:09:DE:27:7D:1D:3C:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/3139302e322e31372e302f32342d3234203d3e203233343536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.2.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:e9:41:e0:6f:b0:3c:0f:5e:9a:eb:7f:72:e9:e1:20:a7:19:
         80:a5:50:f9:eb:fe:a3:fd:61:69:bc:67:14:e5:e1:01:77:a3:
         0e:77:c1:30:13:fa:94:72:61:a4:12:88:1d:f5:e8:e2:e2:b1:
         1c:f5:49:16:db:48:f7:7f:d4:fc:dc:1e:85:7e:ed:96:32:54:
         6e:ee:49:f7:40:c7:1d:40:29:85:51:24:08:39:5e:01:f3:07:
         4b:19:f0:67:df:b9:9e:09:3c:56:29:45:9a:be:ec:e6:66:f7:
         3f:c5:9c:fd:fd:06:6f:55:f9:64:5e:4a:a5:f8:27:7e:8f:6f:
         0f:af:58:c1:a9:d9:ec:ac:46:92:5f:18:e3:66:02:7a:b7:97:
         e7:ff:89:61:dd:ec:5f:0c:d3:6e:4d:a6:b1:85:ac:f7:93:df:
         ba:0c:86:09:c1:22:fc:d7:e7:f9:25:e1:c1:d9:2b:ca:99:d5:
         ab:6b:10:fd:81:c2:5d:a7:df:ee:38:d2:23:68:70:58:d3:4f:
         8b:43:7e:69:e6:1e:69:56:6c:5d:ab:0d:6f:8b:18:db:98:9a:
         ce:b3:c3:88:72:c2:39:b3:63:e4:eb:4a:be:70:44:66:52:32:
         b4:7e:75:60:81:7c:15:f6:7b:94:52:15:aa:3c:38:14:b1:ad:
         ab:28:cc:af
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUO3X6voM9ji2DuQ4oNaLZxeCw7DMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTcxRjE0RDVBRUVDODlGNEFFNDEwNEMwRjYwOURFMjc3
RDFEM0NENzAeFw0yNDAzMDUxODA3MDVaFw0yNTAzMDQxODEyMDVaMDMxMTAvBgNV
BAMTKDg5MDgwMjNEMjA5N0RFOENGRjI5N0Y3OURBRDkzRTU0ODA2OTY4RjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCamQISVeVD6T3Nt58/MSxq5eMo
uh5Fbyg5bXcApjh/l5hCpo+TKKP+vQqSR2d9caGsKSvLXH5Mp9yXAborSJNw02rn
CgQVZ6MdPKVri1Beqpv15viS5K4fjAeCcSclvGcFljzDyS3z3THba+0z8cr6HOAh
ckZjGdeArhZb7MJkrraBgEGXyhV/qDrWXdtSQ1+d86cFtGGVWdcEf8RjHPntPIpl
i3fYf5drGgW2B7BkSjLnIYTcHei1ptXrAo9HQZizUng4haWDNp60Qi6xqWnx/k2h
9rj0K/OQrQlYby1ReyMEFWz4kn2mkHH3tjKmKtgd4wX8YPNMsFBJcNEhVBB3AgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQUiQgCPSCX3oz/KX952tk+VIBpaPkwHwYDVR0j
BBgwFoAUFx8U1a7sifSuQQTA9gneJ30dPNcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DMTM4MkIxQTRDQ0FCNjZEQTYxOEIxRUY5QUI0QzYzMDg2
RUFBQTE4RTdGMEM5NUJEOTQxODAzQzQ2RjVENTY3LzAvMTcxRjE0RDVBRUVDODlG
NEFFNDEwNEMwRjYwOURFMjc3RDFEM0NENy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xNzFGMTRENUFFRUM4OUY0QUU0
MTA0QzBGNjA5REUyNzdEMUQzQ0Q3LmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzEzODJCMUE0Q0NBQjY2REE2MThCMUVGOUFCNEM2MzA4NkVBQUExOEU3
RjBDOTVCRDk0MTgwM0M0NkY1RDU2Ny8wLzMxMzkzMDJlMzIyZTMxMzcyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMjMzMzQzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvgIRMA0GCSqG
SIb3DQEBCwUAA4IBAQBj6UHgb7A8D16a639y6eEgpxmApVD56/6j/WFpvGcU5eEB
d6MOd8EwE/qUcmGkEogd9eji4rEc9UkW20j3f9T83B6Ffu2WMlRu7kn3QMcdQCmF
USQIOV4B8wdLGfBn37meCTxWKUWavuzmZvc/xZz9/QZvVflkXkql+Cd+j28Pr1jB
qdnsrEaSXxjjZgJ6t5fn/4lh3exfDNNuTaaxhaz3k9+6DIYJwSL81+f5JeHB2SvK
mdWraxD9gcJdp9/uONIjaHBY00+LQ35p5h5pVmxdqw1vixjbmJrOs8OIcsI5s2Pk
60q+cERmUjK0fnVggXwV9nuUUhWqPDgUsa2rKMyv
-----END CERTIFICATE-----
Generated at Wed May 1 05:56:58 2024 by rpki-client on console-fra.rpki-client.org